devilhorns pushed a commit to branch feature/security. http://git.enlightenment.org/core/efl.git/commit/?id=d45812f4ed38a6869822508896cfbeb2dd30ef58
commit d45812f4ed38a6869822508896cfbeb2dd30ef58 Author: Chris Michael <cp.mich...@samsung.com> Date: Thu May 10 12:11:29 2018 -0400 edje: Update code to use memcpy as per review --- src/bin/edje/edje_cc_out.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/src/bin/edje/edje_cc_out.c b/src/bin/edje/edje_cc_out.c index c953b8def3..6f8ef86021 100644 --- a/src/bin/edje/edje_cc_out.c +++ b/src/bin/edje/edje_cc_out.c @@ -4184,8 +4184,8 @@ data_process_string(Edje_Part_Collection *pc, const char *prefix, char *s, void key = alloca(keyl + 1); if (!key) return; - strncpy(key, prefix, keyl + 1); - strncat(key, ":\"", strlen(":\"")); + memcpy(key, prefix, keyl - 1); + strncat(key, ":\"", strlen(":\"") + 1); quote = 0; escape = 0; --